Delete your account
Which app does this cover? This page covers the app Yedeni (package name `com.yedeni.android` on Android, `com.yedeni.ios` on iOS), published by Yedeni UG (haftungsbeschränkt). You can delete your account at any time and without giving a reason — inside the app, or by email if you no longer have the app installed.
Option 1 — in the app (immediate)
- Open Yedeni and go to Profile › Settings.
- Choose “Delete account”.
- Confirm the prompt.
Deletion starts immediately and does not go through support. You do not need to write to us or ask anyone for permission.
First: take your data with you Under Profile › Settings › “Export data” you get a complete, machine-readable copy of all your data in JSON format, instantly. This is no longer possible after deletion.
Option 2 — without the app (by email)
If you no longer have the app installed, or cannot access your account, write to datenschutz@yedeni.com. State the email address you registered with. We verify that you are entitled, delete the account, and reply within one month (Art. 12(3) GDPR).
An active subscription does NOT end with it You buy and pay for a subscription through the App Store or Google Play. Deleting your account does count as cancelling it with us, but it does not stop billing in the store. Please therefore also cancel it in that store's subscription settings; anything the store bills for the time after the cancellation takes effect is refunded to you (§ 6(4) of the Terms).
What is deleted
Within 30 days we irreversibly remove all personal data, unless a statutory retention obligation applies or “What remains” below says otherwise. This covers in particular:
- your account, profile, credentials and devices
- all health and nutrition data: diary entries, weight, water, steps, goals, streaks and progress
- your meal plans, shopping lists, collections, favourites and reviews
- your conversations with the AI coach, including the memories derived from them
- your own recipes with their photos and videos — except those others have taken over (see below) — and your other uploaded media
- your notifications, settings and activity history
- your consents and your marketing contact record
What remains — and why
Being complete is part of deleting: these remnants survive an account deletion. Apart from emails you wrote to us yourself and records we must keep by law, none of them carries your name or your email address in plain text; where an identifier remains, it is a random identifier with no link to your other data or a checksum from which your address or identifier cannot be read.
| What | How long | Why |
|---|---|---|
| Recipes you published that others have taken over — into a meal plan, a collection, their favourites or their diary, with a rating, as cooked or as a copy —, and recipes a notice under the Digital Services Act concerns | indefinitely, without your name | They sit in other people's plans; removing them would destroy other users' planning. A reported recipe stays as evidence for the procedure. All other recipes we delete together with their images. We will delete these too on request — delete them before deleting your account, or write to us. |
| Foods and products you contributed to the database | indefinitely, without your name | They belong to the shared food database and are used by everyone. |
| Reports and complaints under the Digital Services Act | the decision as evidence; your name and address are removed with the account | We must be able to demonstrate how a report was handled. |
| Log of administrative access to your account | 12 months | Evidence of who on our team accessed which account and when (privacy notice § 12.1). The entry names the account identifier, no content; if our team deleted the account, it keeps your email address only as a checksum. |
| Error and crash reports | up to 90 days | They sit with our error-diagnostics provider under a pseudonymous user identifier, without name or email address, and expire automatically. |
| Support requests in our ticket system | without content | Content, subject, your name and attachments are removed with the account (attachments within minutes); an empty case with category and timestamps remains for our statistics. |
| Emails you wrote to us, in our mailboxes | until your matter is settled; emails we must keep as business letters, six years | Account deletion does not reach our mailboxes automatically. Write to us if you want these emails deleted — unless a retention obligation applies, we will. |
| Invoices and accounting records | 8 years | Statutory retention obligation (§ 257 HGB, § 147 AO). It takes precedence over erasure. |
| Delivery statistics for emails we sent | 26 months, then deleted automatically | Recipient address, subject and content are redacted on deletion; what remains is the record that a message was delivered. |
| A checksum of your email address on our suppression list | until you demonstrably give consent again with the same address | Without it, the next campaign would contact you again. We remove the address itself; it cannot be read from the checksum, which serves solely to NOT contact you. |
| Checksums for the Pro days, if your account received them — of your device identifier, your email address and, where applicable, the identifier of your Apple or Google account | 12 months after the Pro days were granted, then deleted automatically | Without them, a new account on the same device or with the same address would receive Pro days again (§ 2(5) of the Terms). We remove the link to your account on deletion; the device identifier and address cannot be read from the checksums, which serve only for comparison when Pro days are to be granted again (privacy notice § 3.6). The device identifier in your iPhone's keychain sits on your device and stays there until you reset it. |
| AI usage cost records | up to 180 days, without your name | They are the app's only cost accounting. The user identifier is removed immediately on deletion; a cost archive without any personal reference is kept longer. |
| Background tasks already in the queue (scheduled push notifications, coach insights, weekly review, taste profile) | at most 7 days | The provider keeps the entries (user ID, kind of task, time, for push notifications the time zone and, where applicable, the meal) that long in its logs and dead-letter queue; a push token may remain in its delivery check for up to 6 hours. Nothing is delivered to or computed for a deleted account any more. |
| Server access logs | 30 days | Operational security and abuse prevention; they expire automatically. |
| Database backups | up to 30 days | For technical reasons copies may persist that long; they are not restored and expire automatically. |
How long does it take?
Your account and access are gone immediately — you cannot sign in again once you confirm. Complete, irreversible removal from all systems including backups is finished after 30 days at the latest. Recovery is not possible afterwards, not even by us.
Questions or problems
Write to datenschutz@yedeni.com. What data we process at all, and on what basis, is set out in the Privacy notice; your further rights — access, rectification, portability, objection — are in § 14 there.